Challenge â `/challenge [gate1|gate2|<file>]`
The cheapest place to lose a gate is in rehearsal. Attack the PM's deck the way the real audience will â armed with the registry, which knows exactly where the evidence is thin.
Bulletproof
Make software hold up against a real attacker â one that is now partly automated, reads your public code end-to-end, and moves in minutes. Built for solo developers and small teams, who get breached through a short list of boring mistakes, not exotic ones.
offensive-bluetooth-ble
Bluetooth Low Energy (BLE) attack methodology â GATT enumeration, characteristic read/write without auth, pairing downgrade (Just Works forced), LE Secure Connections bypass, MITM via active relay, sniffing with Sniffle (TI CC1352) / Ubertooth / Frontline, encryption key extraction (LE Legacy Pairing crackable, LE Secure Connections strong), proximity authentication abuse (cars, locks), and companion-app trust analysis. Use for IoT BLE devices, smart locks, fitness trackers, medical devices, BLE beacons, or any device pairing over BLE.
analysing-attack
Analyse Mitre ATT&CK tactics, techniques and sub-techniques. Use when performing analysis of threat detections, threat models, security risks or cyber threat intelligence
Mitre Attack Mcp Server
MCP server providing 50+ tools for MITRE ATT&CK techniques, groups, and mitigations
Mcp Watchdog
MCP security proxy - detects and blocks 40+ MCP attack classes. Zero config.
Adversarial Review
Spawn reviewers on the **opposite model** to challenge work. Reviewers attack from distinct lenses grounded in brain principles. The deliverable is a synthesized verdict â do NOT make changes.
AI/ML Attack Surface
This skill should be used when the user asks about "AI security", "ML pipeline attacks", "prompt injection", "model deserialization", "unsafe model loading", "Jupyter injection", "LLM security", or needs to identify AI/ML-specific vulnerabilities in codebases that use machine learning frameworks.
Credential Exfiltration Detection
Determine whether stolen credentials were actually used by attackers after a security incident. This skill walks through a four-phase investigation: scoping what was at risk, checking audit trails, identifying lateral movement, and verifying that rotation was complete.
attack-path-architect
Generates strategic attack trees and kill chains from reconnaissance data or domain input. Maps MITRE ATT&CK TTPs, identifies chaining opportunities, trust relationships, and prioritizes attack paths by feasibility and impact. Use when user asks for "attack path", "kill chain", "attack tree", "threat modeling from recon", "attack surface analysis", or "prioritize targets". Requires prior recon data or a domain to analyze. For authorized pentesting and red team engagements only.
Pixel Art Animator
Create and manage sprite animations with multiple frames, animation tags, frame durations, and linked cels. Use when the user wants to animate a sprite, add animation, create movement, make it move, mentions "animation", "animated", "frames", "keyframes", "frame rate", "FPS", "timing", "duration", "walk cycle", "run cycle", "idle animation", "attack animation", "jump", "movement", "motion", or describes actions like "walking", "running", "jumping", "attacking", "breathing", "bobbing", "bouncing". Trigger on animation tags, loops, playback, sequences, "add frames", "duplicate frame", "frame timing", "ping-pong", "loop", "sequence". Also for linked cels, static backgrounds, and frame optimization.
Arc Security
Scan AI agent skills for 25 attack classes + runtime monitoring. 1,316+ findings.
attack-surface
Maps every entry point, component, and trust boundary of a target before testing begins prevents missed coverage and prioritizes the highest-value attack paths. Trigger when the user provides a target and wants to know where to start, says "map the attack surface", "what should I test", or "where do I begin", or is starting any engagement after scope-grill is complete.
Greynoise
MCP server for GreyNoise API - Check if IPs are internet background noise or targeted attacks
hacker
Red team agent for vm2 sandbox escape testing. Systematically attempts to break out of the vm2 JavaScript sandbox by exploiting known and novel attack vectors. Use this skill whenever the user makes changes to vm2's sandbox code (bridge.js, setup-sandbox.js, setup-node-sandbox.js, vm.js, nodevm.js, transformer.js) and wants to verify the sandbox still holds. Also use when the user asks to "hack", "attack", "test security", "try to escape", "red team", or "pentest" the sandbox. Trigger on any request to find sandbox escapes or verify sandbox integrity.
Crypto Reviewer â Ultrasafe Attacker Skill (v0.2.0)
> **Role**: Agent 4 of the 8-agent Ultrasafe fan-out (Ultrasafe.md §15.4). Simulated penetration testing of the cryptographic surface, executed as an *attacker* â adversarial probe, not a friendly audit. > **Tone**: crypto-formal. Findings cite RFC / NIST SP / FIPS / IETF draft anchors, not infor
Cyntrisec AWS Security
AWS security analysis: attack paths, compliance checking, and remediation planning.
Cloud Audit
AWS security scanner with Attack Chains, Breach Cost Estimation, and MCP Server for AI agents.